|
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
~NEW OFFSET~:
jmp newmem
nop
returnhere:
newmem:
mov al,90 // AL ?????????????? ?????
originalcode:
mov [ecx+000000a8],al
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
~NEW OFFSET~: // 88 81 A8 00 00 00 C2 04 00 CC CC CC 8D 81 AC 00 00 00 C3 CC CC CC CC CC
mov [ecx+000000a8],al
|